From 4281486e3456788f6bae22a86a5a7b7ed566b92c Mon Sep 17 00:00:00 2001 From: unitexe Date: Tue, 13 Jan 2026 00:57:55 -0600 Subject: Rootful registry quadlet with TLS support --- .../registry-quadlet/files/registry.container | 23 ++++++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/registry-quadlet/files/registry.container (limited to 'meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/registry-quadlet/files/registry.container') diff --git a/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/registry-quadlet/files/registry.container b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/registry-quadlet/files/registry.container new file mode 100644 index 0000000..41b3248 --- /dev/null +++ b/meta-unit-core/dynamic-layers/virtualization-layer/recipes-containers/registry-quadlet/files/registry.container @@ -0,0 +1,23 @@ +[Unit] +Description=A registry container +After=time-sync.target regkeygen.service +Wants=time-sync.target systemd-time-wait-sync.service regkeygen.service + +[Container] +ContainerName=registry +Image=docker.io/registry:latest +PublishPort=127.0.0.1:5000:5000 +Volume=/etc/registry:/certs +Volume=registry-data:/var/lib/registry +Environment=REGISTRY_HTTP_TLS_CERTIFICATE=/certs/domain.crt +Environment=REGISTRY_HTTP_TLS_KEY=/certs/domain.key + +[Service] +Restart=on-failure +RestartSec=10s +RestartSteps=5 +RestartMaxDelaySec=1min +TimeoutStartSec=15min + +[Install] +WantedBy=multi-user.target default.target -- cgit v1.2.3